WE CLAIM: 

1 . A method for distributed network address translation with security, comprising the 
5 following steps: 

providing a first network device and a second network device on a first network; 
establishing a security association between the first network device and a third network 
device on a second network external to the first network; 

specifying an external address of the third network device for the security association; 

P 10 storing the external address in a table on the second network device; and 

•fi 

•ff mapping at least one of an internal address and a security value to the external address in 

-S 

^ the table. 

£ 

HTT; 

* 2. A computer readable medium having stored therein instructions for causing a central 

□ 

13 15 processing unit to execute the method of claim 1 . 

i y 

s 

^ 3. The method of claim 1 wherein the second network device is a distributed network 

address translation router. 

20 4. The method of claim 1 wherein the security value is a security parameter index for an 

Internet Protocol security protocol. 
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5. The method of claim 4 wherein the Internet Protocol security protocol is any of an 
Authentication Header protocol, Encapsulated Security Payload protocol, or an Internet Key 
Exchange protocol. 

5 6. The method of claim 1 further comprising the step of specifying the external address 

of the third network device for the security association with a Port Allocation Protocol external 
address validating message sent from the first network device to the second network device. 



7. The method of claim 6 wherein the Port Allocation Protocol external address 

0 10 validating message has a valid external address field. 

a s 

A 8. The method of claim 1 further comprising the step of removing the external address 

m 

m from the table with a Port Allocation Protocol external address invalidating message sent from 

P the first network device to the second network device. 



9. The method of claim 8 wherein the Port Allocation Protocol external address 
invalidating message has an invalid external address field. 



10. A method for distributed network address translation with security, comprising the 
20 following steps: 

providing a first network device and a second network device on a first network, and a 
third network device on a second network external to the first network; 
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sending a packet having an external address and a security value from the third network 
device to the first network device; 

intercepting the packet with the second network device; 

determining whether the security value of the packet has been allocated to the first 
5 network device; 

determining whether the external address of the packet has been specified by the first 
network device as being valid; and 

sending the packet from the second network device to the first network device if the 
security value has been allocated to the first network device and the external address of the 
Q 10 packet has been specified by the first network device as valid. 

fjjij; 

_p 

£7 1 1 . A computer readable medium having stored therein instructions for causing a central 

ijj processing unit to execute the method of claim 10. 

si 

="y 15 12. The method of claim 10 wherein the second network device is a distributed network 

*5 address translation router. 

13. The method of claim 10 wherein the security value is a security parameter index for 
an Internet Protocol security protocol. 

20 

14. The method of claim 13 wherein the Internet Protocol security protocol is either an 
Authentication Header protocol or an Encapsulated Security Payload protocol. 
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15. The method of claim 10 further comprising the step of discarding the packet if the 
security value of the packet has not been allocated to the first network device. 



5 16. The method of claim 10 further comprising the step of discarding the packet if the 

external address of the packet has not been specified by the first network device as being valid. 

17. The method of claim 10 further comprising the steps of discarding the packet if the 
security value of the packet has not been allocated to the first network device, and discarding the 
Q 10 packet if the external address of the packet has not been specified by the first network device as 

'35BT 

!*? being valid. 

E ! s 
"n=r 

33S 

!«& 

fg 18. The method of claim 10 further comprising the step of specifying the external 

Q address as being valid if a security association has been established between the first network 

m 

Ty 15 device and the third network device. 

i ; 

I 

19. The method of claim 18 further comprising the step of storing a valid external 
address in a table on the second network device. 

20 20. A system for distributed network address translation with security comprising: 

a routing network device using distributed network address translation with security to 
provide routing services for a plurality of internal and external network devices; and 
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an established security association table associated with the routing network device for 
storing external addresses of external network devices that have established security associations 
with internal network devices, and mapping external addresses that have been specified as valid 
by the internal network devices to one of internal network addresses and security values for 
5 established security associations. 
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